Data theft alert: Social media users advised to change passwords immediately

ISLAMABAD:  The National Cyber Emergency Response Team (PKCERT) has issued a high-priority warning for social media users about a significant data leak involving companies including Google, Microsoft, and Facebook.

Over 1.8 billion data points from different social media programs have been leaked, claims the alert. Among these, 184 million passwords are known to have been compromised.

Users have been strongly advised by the team to instantly update all password-sensitive applications and accounts. Users are also encouraged to activate two-factor authentication (2FA) to further protect themselves.

The alert instructs users to refrain from clicking on dubious links and to frequently check their accounts for any unexpected activity.

Officials are closely overseeing the circumstances and have urged the public to remain alert and follow appropriate cyber safety measures.

Earlier in December 2024, the National Cyber Emergency Response Team (PKCERT) published an advisory regarding a security flaw in Microsoft’s Windows operating system, reaffirming that the flaw endangers users’ systems and personal information.

The advisory said this security vulnerability might allow hackers access to users’ systems and theft of personal information. The weakness could have been used to obtain domain names, user credentials, and passwords.

Moreover, the security vulnerability might have let sensitive data be accessed by unauthorised persons without even opening files. This flaw could possibly affect Windows versions 7 through 11.

Users should be careful with shared drives, folders, and email attachments, the National Cyber Emergency Response Team had advised. Users were counseled to frequently alter their passwords and make them difficult.

Users were also cautioned against using the same password across several apps. The users had also been urged to frequently update their passwords.

Taking proactive steps to prevent data theft and system hacking, the National Cyber Emergency Response Team underlined, is essential.

Not following these rules could have led to system hacking and data theft.